Hello,
in fact, these mechanisms are based on RADIUS attributes that are
downloaded to the client port upon successful IEEE 802.1x
authentication.
Almost any up-to-date switch should support at least basic 802.1x.
Regards,
Rodrigo.
On 1/25/06, Bernardo Wernesback <bernardosw@gmail.com> wrote:
Hi Gabriel,
You can actually do this using extensions based on 802.1X authentication.
Enterasys calls this SecureNetworks - you can set the VLAN, QoS,
filters, etc. all based on which user is logged on the port! We've
actually done a project using this and it really works.
Cisco also has something similar - I believe they call it RBAC - but
Enterasys is stronger in this arena.
If you need more info e-mail me.
See ya,
Bernardo.
On 1/23/06, Gabriel Orozco <gabriel_orozco@mx.sumida.com> wrote:
Hello List
There is a big campus network with several buildings, that the
administration wants to administer and protect better.
they want to decrease broadcast for IP addresses (DHCP), while they also
have the idea about to use VLANs in order to separate users in several
domains.
however, users travel between buildings since they have activities on
different buildings during the day.
One consultant told me a user can connect his laptop on any building,
and be given his fixed IP, while the switch port is dynamically added to
the user VLAN all with the MAC Address, but they didn't tell me how.
SO these are my questions, if you can give me more light into this:
- Is this behavior part of the VLAN standard, or is there any vendor
that can do this?
- If this is not possible, is there any way to maintain users in their
own "VLAN" while the printers on each building can be shared among all
VLANs?
I already proposed to cut broadcasts with a mixed switched/routed
network, or in the open source side, with a Linux server on each
building doing the DHCP connected to a Radius Server, connected to a LDAP.
Please comment
Thanks In Advance
Gabriel
---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.
http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------
---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.
http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------
---------------------------------------------------------------------------
EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The Norwich University program offers unparalleled Infosec management
education and the case study affords you unmatched consulting experience.
Tailor your education to your own professional goals with degree
customizations including Emergency Management, Business Continuity Planning,
Computer Emergency Response Teams, and Digital Investigations.
http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------
